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DETAILED ACTION 

1 . Original application contained claims 1 - 27. Claims 18 and 21 - 27 have been 
canceled; claims 1, 3, 5, 8, 12 and 15 have been amended; in an amendment filed on 
5/21/2007. The amendment filed have been entered and made of record. Presently, pending 
claims are 1 - 17 and 19-20. 

Response to Arguments 

2. Applicant's arguments with respect to the subject matter of the instant claims have been 
fully considered but are not persuasive. 

3. Applicant argues that prior-arts do not teach what specifically on what the Applicant's 
have provided. Examiner respectfully disagrees because (a) Deen teaches a client sends a 
request to the server in the form of a request method (Deen: Para [0045] and Para [0002] Line 4 
- 6, Para [0003] Line 5 - 8 / Line 19-21), (b) Burrows teaches the client receives the RE- 
DIRECT message from the application server - i.e. the primary server - and forwards to the 
peer server (i.e. the secondary server) that performs an authentication operation on the client 
(Burrows: Para [0060] Line 1 - 6, Para [059] Line 1 - 4 and Para [0061] Line 3 - 5 and Figure 5 
Element 502, 508 & 510) and (c) Burrows teaches receiving the modified request from an . 
authenticated client and the response from the 2 nd server (i.e. peer server) is further re-directed 
to the application server (i.e. the primary server) via the client (Burrows: Para [0062] Last 
Sentence). 

4. Applicant asserts that prior-arts do not teach a client (user) can provide content-bearing 
data, such as form information, to a service before that client is authenticated and then become 
authenticated and not have to again re-supply the content after successfully authentication. 
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Applicant's arguments with respect to the subject matter of the instant claims have been fully 
considered but are not persuasive because Applicant's argument has no merit since the alleged 
limitation has not been recited into the claim regarding " not have to again re-supply the content 
after successfully authentication" . Although the claims are interpreted in light of the 
specification, limitations from the specification are not read into the claims. See In re Van 
Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 1993). 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
A person shall be entitled to a patent unless - 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

5. Claims 1, 3, 5-9, 11, 14- 16 and 19-20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Deen et al. (U.S. Patent 2003/0167317), in view of Burrows et al. (U.S. 
Patent 2005/0055434). 

As per claim 1, Deen teaches a method for preserving content, comprising: 
receiving a request having content originating from a non-authenticated client, wherein 
the request is a content-bearing and is issued from the client (Deen : Para [0045], Para [0002] 
Line 4-6, Para [0003] Line 5 - 8 / Line 19 - 21 and Para [0035] the last 2 nd sentence: (a) a 
client sends a request to the server and (b) the content-bearing request can be issued as a URL 
type HTTP / WebDAV request from a client; instead of emailing the entire file, the client can just 
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email the URL (Para [0003] Line 19-20) and the request may include the authentication 
information that requires authentication by the server - i.e. a HTTP / WebDAV request from an 
unauthorized client) ; 

modifying the request and associating the content with the modified request (Deen : Para 
[0073] - [0074]: the content type of the client's HTTP / WevDAV "PUT" request uses the new 
content type via MIME maps if the MIME map specifies a different content type than the client's 
PUT request of the resource). 

However, Deen does not disclose expressly redirecting the non-authenticated client to an 
authentication service and including the modified request; and receiving the modified request 
from an authenticated client and reacquiring the content using the modified request. 

Burrows teaches redirecting the non-authenticated client to an authentication service and 
including the modified request (Burrows: Para [0060] Line 1 - 6, Para [059] Line 1 - 4 and Para 
[0061] Line 3 - 5 and Figure 5 Element 502, 508 & 510: the client receives the RE-DIRECT 
message from the application server - i.e. the primary server - and forwards to the peer server 
(i.e. the secondary server) that performs an authentication operation on the client); and 

receiving the modified request from an authenticated client (Burrows: Para [0062] Last 
Sentence: the response from the 2 nd server (i.e. peer server) is further re-directed to the 
application server (i.e. the primary server) via the client) and 

reacquiring the content using the modified request from the client (Burrows: Para [0064] 
Line 9 - 13 and Para [0060] Line 1 - 6, Para [059] Line 1 - 4 and Para [0061] Line 3 - 5 and 
Figure 5 Element 502, 508 & 510: (a) the client receives the RE-DIRECT message from the 
application server - i.e. the primary server - and forwards to the peer server (i.e. the secondary 
server) that performs an authentication operation on the client and (b) the required data is 
obtained from the intermediate DB or from the redirected response). 
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It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Burrows within the system of Deen because (a) 
Deen teaches a certain types of HTTP request that can also handle content-bearing WebDAV 
request by using a URL (Deen : Para [0002] and [0003]) and (b) Burrows teaches processing a 
client HTTP request by providing not only a multiple servers infrastructure including a proxy 
server (Burrows: Para [0033] Line 1 - 8) but also a secondary server to implement a particular 
communication protocol such as authentication protocol that the primary server does not have 
but other server components may have to achieve interaction with users through web browsers 
and similar types of client applications (Burrows: Para [0006] - [0007], Para [0060] Line 1 - 6, 
Para [059] Line 1-4 and Para [0061] Line 3 - 5). 

As per claim 8, Deen teaches a method for preserving content, comprising: 
issuing a content-bearing request to a service, wherein the content-bearing request 
originates from a client and is directed to the service (Deen : Para [0045], Para [0002] Line 4-6, 
Para [0003] Line 5 - 8 / Line 19 - 21 and Para [0035] the last 2 nd sentence: (a) a client sends a 
request to the server and (b) the content-bearing request can be issued as a URL type HTTP / 
WebDAV request from a client; instead of emailing the entire file, the client can just email the 
URL (Para [0003] Line 19-20) and the request may include the authentication information that 
requires authentication by the server - i.e. a HTTP / WebDAV request from an unauthorized 
client). 

Dean does not disclose expressly receiving, at the client, a modified request and a 
redirection for authentication along with a directive to retain the content at the client. 

Burrows in view of Dean teaches receiving, at the client, a modified request and a 
redirection for authentication along with a directive to retain the content at the client (Burrows: 
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Para [0060] Line 1 - 6, Para [059] Line 1 - 4, Para [0061] Line 3 - 5 and Para [0064] & Figure 5 
Element 502, 508 & 510: (a) the client receives a modified request (i.e. RE-DIRECT message) 
from the application server - i.e. the primary server - and forwards to the peer server (i.e. the 
secondary server) that performs an authentication operation on the client and (b) the server 
obtains the required data along with previously stored state information and the associated 
original transaction / content and returns a response to the client) & (Deen : Para [0073] - 
[0074] 21 and Para [0035] the last 2 nd sentence: the content type of the client's HTTP / WevDAV 
"PUT" request can alsouse the new content type via MIME maps if the MIME map specifies a 
different content type than the client's PUT request of the resource). 

See the same rationale of combination applied herein as above in rejecting the claim 1 . 

authenticating the client with an authentication service (Burrows: Para [0061] Line 3 - 5 : 
the response from the 2 nd server (i.e. peer server) is further re-directed to the application server 
(i.e. the primary server) via the client); and 

issuing from the client the modified request to the service (Burrows: Para [0062] Last 
Sentence: the response from the 2 nd server (i.e. peer server) is further re-directed to the 
application server (i.e. the primary server) via the client for the desired service). 

As per claim 15, Deen teaches a content-preserving system, comprising: 
a desired service (Deen: Para [0003] Line 1-10); and 

a server, wherein a client issues a content-bearing request to the desired service and 
the server detects that the client is not authenticated to the desired service (Dean : Para [0002] 
Line 4-6, Para [0003] Line 5 - 8 / Line 19 - 21 and Para [0035] the last 2 nd sentence: the 
content-bearing request can be issued as a URL type HTTP / WebDAV request from a browser 
on a client; instead of emailing the entire file, the client can just email the URL (Para [0003] Line 
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19-20) and the request may include the authentication information that requires authentication 
by the server - i.e. a HTTP / WebDAV request from an unauthorized client). 

However, Dean does not disclose expressly the server is a proxy server and wherein the . 
proxy preserves content associated with the content bearing request, redirects the client to an 
authentication service, and directs the client to issue a modified request after being 
authenticated, the modified request used by the proxy to reacquire the content and submit the 
original content-bearing request to the desired service once the client is authenticated. 

Burrows teaches the server is a proxy server (Burrows: Para [0033] Line 1 - 8: a proxy 
server to receive a client's request) and wherein the proxy preserves content associated with 
the content bearing request at the client (Burrows: Para [0062] Last sentence), redirects the 
client to an authentication service (Burrows: Para [0060] Line 1 - 6, Para [059] Line 1 - 4 and 
Para [0061] Line 3-5 and Figure 5 Element 502, 508 & 510: the client receives the RE- 
DIRECT message from the application server - i.e. the primary server - and forwards to the 
peer server (i.e. the secondary server) that performs an authentication operation on the client); 
and 

directs the client to issue a modified request after being authenticated (Burrows: Para 
[0062] Last Sentence: the response from the 2 nd server (i.e. peer server) is further re-directed to 
the application server (i.e. the primary server) via the client) and 

the modified request used by the proxy to reacquire the content from the client and 
submit the original content-bearing request to the desired service once the client is 
authenticated (Burrows: Para [0064]: (a) the required data is obtained from the intermediate DB 
or from the redirected response for the desired service after the client is authenticated and (b) 
the server obtains the required data along with previously stored state information and the 
associated original transaction / content and returns a response to the client). 
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It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Burrows within the system of Deen because (a) 
Deen teaches a certain types of HTTP request that can also handle content-bearing WebDAV 
request by using a URL (Deen : Para [0002] and [0003]) and (b) Burrows teaches processing a 
client HTTP request by providing not only a multiple servers infrastructure including a proxy 
server (Burrows: Para [0033] Line 1 - 8) but also a secondary server to implement a particular 
communication protocol such as authentication protocol that the primary server does not have 
but other server components may have to achieve interaction with users through web browsers 
and similar types of client applications (Burrows: Para [0006] - [0007], Para [0060] Line 1 - 6, 
Para [059] Line 1 - 4 and Para [0061] Line 3 - 5). 

As per claim 3 and 1 1 , Deen as modified teaches the modifying further includes directing 
the client to store the content in a temporary file and identifying the temporary file within the 
modified request (Dean : Para [0002] Line 4-6, Para [0003] Line 5 - 8 / Line 19-21: the 
content-bearing request can be issued as a URL type HTTP / WebDAV request from a browser 
on a client; instead of emailing the entire file, the client can just email the URL). 

As per claim 5 and 9, Deen as modified teaches the redirecting further includes installing 
a resubmit application on the non-authenticated client that transparently transmits the modified 
request from the client back to the receiving the modified request processing when the 
non-authenticated client is successfully authenticated (Burrows: Para [0060] Line 1 -6, Para 
[059] Line 1 - 4 and Para [0061] Line 3-5, Para [0062] Last Sentence and Figure 5 Element 
502, 508 & 510: the redirecting instruction includes re-directing the modified request to the 2 nd 
server and to resubmit the request data to the primary application server by a installed resubmit 
application - i.e. after the client is successfully authenticated by the 2 nd server i.e. the client 
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receives the RE-DIRECT message from the primary application server and forwards to the 
secondary peer server that performs an authentication operation on the client and the response 
from the 2 nd server (i.e. peer server) is further re-directed to the application server (i.e. the 
primary server) via the client). 

As per claim 6 and 16, Deen as modified teaches recreating the content based on 
directions provided in the modified request (Burrows: Para [0064] Line 9-13 and Para [0073] - 
[0074]: the required data is obtained from the intermediate DB or from the redirected response; 
where the content type of the client's HTTP / WevDAV TUT" request uses the new content type 
via MIME maps if the MIME map specifies a different content type than the client's PUT request 
of the resource). 

As per claim 7, Deen as modified teaches the receiving the request further includes 
receiving the request as a Uniform Resource Locator (URL) request from a World Wide Web 
(WWW) browser on the non-authenticated client, the request received over the Intent using 
Hyper Text Transfer Protocol (HTTP) communications (Dean : Para [0002] Line 4-6, Para 
[0003] Line 5 - 8 / Line 19-21: the content-bearing request can be issued as a URL type HTTP 
/ WebDAV request from a browser on a client; instead of emailing the entire file, the client can 
just email the URL). 

As per claim 14, Deen as modified teaches issuing the content-bearing request further 
includes issuing the content bearing request as a Hyper Text Transfer Protocol (HTTP) 
communication including at least one of a PUT operation and a POST operation (Dean : Para 
[0002] Line 4-6, Para [0003] Line 5 - 8 / Line 19-21 and [0073] - [0074]: the content-bearing 
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request can be issued as a URL type HTTP / WebDAV request from a browser on a client; 
instead of emailing the entire file, the client can just email the URL and the content type of the 
client's HTTP / WevDAV "PUT" request uses the new content type via MIME maps if the MIME 
map specifies a different content type than the client's PUT request of the resource). 

As per claim 19, Deen as modified teaches instructions indicate that the content can be 
acquired from memory or storage accessible to the client (Dean : Para [0002] Line 4-6, Para 
[0003] Line 5 - 8 / Line 19 - 21: the content-bearing can indicate a URL that stores the content 
accessible to the client). 

As per claim 20, Deen as modified teaches the proxy detects that the client is not 
authenticated from the desired service (Dean : Para [0033] Line 1 - 8 and Para [0043] Line 1 1 - 
17: proxy can alternatively participate the implementation of the authentication protocol and thus 
may detect that the client is not authenticated from the desired service). 

6. Claims 2, 10 and 17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Deen et al. (U.S. Patent 2003/0167317), in view of Burrows et al. (U.S. Patent 2005/0055434), 
and in view of Bodin et al. (U.S. Patent 6,604,106). 

As per claim 2, 10 and 17, Deen as modified does not disclose expressly the modifying 
further includes compressing the content within the modified request. 

Bodin teaches the modifying further includes compressing the content within the modified 
request (Bodin : Column 5 Line 49 - 52 and Column 7 Line 30 - 33: the content type can be 
compressed to optimize the storage of web server content). 
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It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Bodin within the system of Deen as modified 
because (a) Deen teaches a certain types of HTTP request that can also handle content- 
bearing WebDAV request by using a URL such as HTTP PUT request and a new content type 
can be created if necessary (Deen : Para [0002] - [0003] and Para [0073]) and (b) Bodin 
teaches processing a client HTTP PUT request that can use / create a compressed content 
type so that the storage of web server content can be optimized (Bodin : Column 5 Line 50 - 52 
and Column 7 Line 30 - 33). 

7. Claims 4 and 13 are rejected under 35 U.S.C. 103(a) as being unpatentable over Deen 
et al. (U.S. Patent 2003/0167317), in view of Burrows et al. (U.S. Patent 2005/0055434), and in 
view of Agarwalla et al. (U.S. Patent 6,985,936). 

As per claim 4 and 13, Deen as modified does not disclose expressly the modifying 
further includes assigning a key to the modified request, storing the content, and indexing the 
content based on the key. 

Agarwalla teaches the modifying further includes assigning a key to the modified request, 
storing the content, and indexing the content based on the key (Bodin : Column 10 Line 55 - 59 
and Column 4 Line 5 - 15: in a content caching system, the content server translates (modifies) 
from an incoming URL of the target data to a file name; where the encrypted filename derived 
from the CMS (Content Management System) is used as a key to index into the mapping 
information to extract the associated URL equivalent as a file name value). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Agarwalla within the system of Deen as 
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modified because (a) Deen teaches a certain types of HTTP request by using a URL to 
reference target data and a new content type of the data can be created if necessary (Deen : 
Para [0002] - [0003] and Para [0073]) and (b) Agarwalla teaches providing a security enhanced 
method handling HTTP request in a content caching system, where the substitute for the file 
name of the target data can be used without publicly exposing the information about the actual 
file structure used by a content server by translating (modifying) from an incoming URL of the 
target data to a file name; where the encrypted filename derived from the CMS (Content 
Management System) is further used as a key to index into the mapping information to extract 
the associated URL equivalent as a file name value (Agarwalla : Column 10 Line 59 - 62, 
Column 10 Line 55 - 59 and Column 4 Line 5-15). 

8. Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over Deen et al. 
(U.S. Patent 2003/0167317), in view of Burrows et al. (U.S. Patent 2005/0055434), and in view 
of Rajan et al. (U.S. Patent 6,871,220). 

As per claim 1 2, Deen as modified does not disclose expressly the receiving the 
instructions further include storing the content as a cookie. 

Rajan teaches the receiving the instructions further include storing the content as a 
cookie (Rajan : Column 3 Line 1 9 - 20 and Column 1 5 Line 8 - 1 1 : the host / server computer 
receives the aggregated data content in a HTTP protocol message and preferably stored as 
cookie data). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Rajan within the system of Deen as 
modified because (a) Deen teaches a certain types of HTTP request by using a URL to 
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reference target data and a new content type of the data can be created if necessary 
(Deen : Para [0002] - [0003] and Para [0073]) and (b) Rajan teaches providing a layer 
of security against unauthorized access by using cookie as another content type to 
associate personal information (PI) with each end user as specified in "HTTP State 
Management Mechanism" according to RFC-2109 so that an inherent support can be 
provided for segregating personal information (PI) associated with one end user from 
PI associated with all other end users (Rajan: Column 5 Line 17-31). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as 
set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing date 
of this final action. 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Longbit Chai whose telephone number is 571-272-3788. The examiner 
can normally be reached on Monday-Friday 9:00am-5:00pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Longbit Chai 
Examiner 
Art Unit 2131 
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